weakstrams.com

Issued by R11

About this certificate

This digital certificate with serial number 04:0e:7c:01:b0:1b:a8:1a:9f:9f:85:4d:62:d2:c4:db:19:71 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=weakstrams.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:0e:7c:01:b0:1b:a8:1a:9f:9f:85:4d:62:d2:c4:db:19:71
Serial Number (int): 353377929899603589476149879328023758182769
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 88:0a:b0:00:65:83:20:9f:a8:83:a0:85:ef:22:c9:7d:e8:7d:81:b6
AuthorityKeyId: c5:cf:46:a4:ea:f4:c3:c0:7a:6c:95:c4:2d:b0:5e:92:2f:26:e3:b9

Fingerprint (sha1): 61:27:93:21:18:ee:80:e1:02:e6:7d:7d:c9:5a:ea:c5:0d:64:25:79
Fingerprint (sha256): ad:8d:d8:59:a3:81:45:ad:d7:df:96:75:be:3e:1e:9c:87:7d:19:aa:ca:62:3f:b0:ac:4a:eb:a3:de:c0:f2:aa

Issuing Certificate URL: http://r11.i.lencr.org/

Revocation information

OCSP Server: http://r11.o.lencr.org

Check the revocation status for certificate weakstrams.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for weakstrams.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.arrowheadhomes.net
*.axampoli.com
*.brazzerade.com
*.bristol-garden-waste.com
*.cuentaspremiumgratis.info
*.dataeventmonitoring.com
*.dfm2uhd.com
*.digiadspro.com
*.districtgallery.com
*.duxporn.com
*.earn4files.com
*.facoil.com
*.freethemesdownloader.com
*.gansllc.com
*.hanoiphotographytours.com
*.idol21.club
*.ilovejams.com
*.jgabrielgifts.com
*.karingsemendaklombok.com
*.leaguecitygov.com
*.magazinifsa.com
*.maitheird.com
*.mansfieldpluming.com
*.mimedicalclinics.com
*.mindoftherich.com
*.movie2.online
*.mpobos.site
*.mrspeanutcomedy.com
*.mymovieslab.com
*.nanalinfo.com
*.nmjwebportal.com
*.number9-menes.com
*.phimlendinh.net
*.pixbot.club
*.prartisans.com
*.publirelax.com
*.qyxy315.com
*.rent2ownwheels.com
*.rhondaimport.site
*.richmond3121.au
*.ryanscharitymw.org
*.shortysdiner.com
*.sosyalservis.net
*.thegossiplife.com
*.themotobarista.com
*.timberlakeseminars.com
*.trtand.com
*.videos-hq.com
*.vladlo.com
*.weakstrams.com
arrowheadhomes.net
axampoli.com
brazzerade.com
bristol-garden-waste.com
cuentaspremiumgratis.info
dataeventmonitoring.com
dfm2uhd.com
digiadspro.com
districtgallery.com
duxporn.com
earn4files.com
facoil.com
freethemesdownloader.com
gansllc.com
hanoiphotographytours.com
idol21.club
ilovejams.com
jgabrielgifts.com
karingsemendaklombok.com
leaguecitygov.com
magazinifsa.com
maitheird.com
mansfieldpluming.com
mimedicalclinics.com
mindoftherich.com
movie2.online
mpobos.site
mrspeanutcomedy.com
mymovieslab.com
nanalinfo.com
nmjwebportal.com
number9-menes.com
phimlendinh.net
pixbot.club
prartisans.com
publirelax.com
qyxy315.com
rent2ownwheels.com
rhondaimport.site
richmond3121.au
ryanscharitymw.org
shortysdiner.com
sosyalservis.net
thegossiplife.com
themotobarista.com
timberlakeseminars.com
trtand.com
videos-hq.com
vladlo.com
weakstrams.com

Other certificates including the domain name weakstrams.com

(limited to 100 certificates)
prepschollar.com
caramelmature.co
weakstrams.com
emiliarutkowska.info
weakstrams.com
weakstrams.com
prepschollar.com
weakstrams.com
weakstrams.com

Certificate

The complete raw certificate details for weakstrams.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 353377929899603589476149879328023758182769
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R11'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-28 09:09:48 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-26 09:09:47 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'weakstrams.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 929410966911076784386680667059895141930826659204340173545435741462694000059841414471646304324321090357608234977482365929900091116869146903930351290593267425685604351574428297345611351220840778085146571052978753184921732421274919764111821799779739021703303023578143986707649764732367856766260289402531786529292829097286503286210746481694568961571853746704575434687143189854603162397728223037049185678615943377034034318566761629652869166876669597139367435807063972400680671955435702350811332408875037835740658222817024382490447324589269038227537520393170004072357404469170543790480258474043008167701998125221657705563623489680980208251652383924176780606790990312279055358160535524890430524528895283774689935574252148583420002987380342124479690088574346511669231951480169752314053097674660675562136801150045679872779073260564766470587598407040191589156845809323735095742113215182353990077773701220201076439543918047354971064057605354571125158654959867310344439598706810166429687641298076506422924191553360495978158426587676165227578044150938336023360698705044930236052825488987295213777715202890772951767648015424617571712192402065238574269536667075162235593996517473931883986899283375283848173642899470842022878366726222872244493388639
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							880ab0006583209fa883a085ef22c97de87d81b6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c5cf46a4eaf4c3c07a6c95c42db05e922f26e3b9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1894 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.arrowheadhomes.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.axampoli.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.brazzerade.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bristol-garden-waste.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cuentaspremiumgratis.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dataeventmonitoring.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dfm2uhd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.digiadspro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.districtgallery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.duxporn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.earn4files.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.facoil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.freethemesdownloader.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gansllc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hanoiphotographytours.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.idol21.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ilovejams.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jgabrielgifts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.karingsemendaklombok.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.leaguecitygov.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.magazinifsa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.maitheird.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mansfieldpluming.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mimedicalclinics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mindoftherich.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.movie2.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mpobos.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mrspeanutcomedy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mymovieslab.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nanalinfo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nmjwebportal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.number9-menes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.phimlendinh.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pixbot.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prartisans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.publirelax.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.qyxy315.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rent2ownwheels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rhondaimport.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.richmond3121.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ryanscharitymw.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shortysdiner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sosyalservis.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thegossiplife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.themotobarista.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.timberlakeseminars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.trtand.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.videos-hq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vladlo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.weakstrams.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arrowheadhomes.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'axampoli.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brazzerade.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bristol-garden-waste.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cuentaspremiumgratis.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dataeventmonitoring.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dfm2uhd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digiadspro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'districtgallery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'duxporn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'earn4files.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'facoil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freethemesdownloader.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gansllc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hanoiphotographytours.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'idol21.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ilovejams.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jgabrielgifts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'karingsemendaklombok.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leaguecitygov.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazinifsa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maitheird.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mansfieldpluming.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mimedicalclinics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mindoftherich.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'movie2.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mpobos.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mrspeanutcomedy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mymovieslab.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nanalinfo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nmjwebportal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'number9-menes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phimlendinh.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pixbot.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prartisans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'publirelax.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qyxy315.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rent2ownwheels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rhondaimport.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'richmond3121.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ryanscharitymw.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shortysdiner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sosyalservis.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thegossiplife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'themotobarista.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'timberlakeseminars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trtand.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'videos-hq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vladlo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weakstrams.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00075003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e000001905e5294ab000004030046304402207b5fafe0fef17b45b3422612dacbd16f0f15eda730e3054a06c0fecf4f7c148b02203b19c5cf6ac6f0957917dc722e78e69bfa76abcb8d0dc8ae5abc752d2e4fe39700770076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a74000001905e529ccf0000040300483046022100ab29c4b872a94cab621d09a88eabe4d62f69099c29d08d27469f945fa10202e8022100b002a5d2da4cf774ceaa949d745906ab19bc3c80d18a111d3de5cc7c5d649d9f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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